CVE-2000-0860
The file upload capability in PHP versions 3 and 4 allows remote attackers to read arbitrary...
The file upload capability in PHP versions 3 and 4 allows remote attackers to read arbitrary files by setting hidden form fields whose names match the names of internal PHP script variables.
Exploit likelihood
What each source reports
NVD Score used
The file upload capability in PHP versions 3 and 4 allows remote attackers to read arbitrary files by setting hidden form fields whose names match the names of internal PHP script variables.
- Record
CVE-2000-0860- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE ListNo score
The file upload capability in PHP versions 3 and 4 allows remote attackers to read arbitrary files by setting hidden form fields whose names match the names of internal PHP script variables.
- Record
CVE-2000-0860- Updated
- 2026-11-02
EUVDEUVD-2000-0847No score
The file upload capability in PHP versions 3 and 4 allows remote attackers to read arbitrary files by setting hidden form fields whose names match the names of internal PHP script variables.
- Record
EUVD-2000-0847- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2f2v-rgmc-w6fpNo score
The file upload capability in PHP versions 3 and 4 allows remote attackers to read arbitrary...
The file upload capability in PHP versions 3 and 4 allows remote attackers to read arbitrary files by setting hidden form fields whose names match the names of internal PHP script variables.
- Record
GHSA-2f2v-rgmc-w6fp- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2000-0860 is a medium vulnerability (CVSS 5.0) in Php, published November 14, 2000. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.74%, the 86th percentile. No source names a fixed version.
References
exchange.xforce.ibmcloud.com/vulnerabilities/5190
archives.neohapsis.com/archives/bugtraq/2000-08/0477.html
securityfocus.com/bid/1649
cvsweb.php.net/viewcvs.cgi/php4/main/rfc1867.c.diff?r1=1.38%3Aphp_4_0_2&tr1=1.1&r2=text&tr2=1.45&diff_format=u
nvd.nist.gov/vuln/detail/CVE-2000-0860
github.com/advisories/GHSA-2f2v-rgmc-w6fp